search

maddevsio / bbcrawler

[OBSOLETE REPO] Bug Bounty Crawler and bot new repo --->
https://github.com/CyberLight/cyxbot
MIT License
6 stars 1 forks source link

Can you explain the parameters, it's kinda ambiguous and confusing #1

Open ta1bbty opened 5 years ago

ta1bbty commented 5 years ago

Hi Alexander/Team,

First of all thanks for making the wonderful tool and related Telegram bot channel. It's very useful. I was trying to do the same and run your code locally. However, I am facing bit of a problem, likely due to my limited understanding of hackerone platform ( maybe ? ) .

First : 

SearchUrl:           "https://hackerone.com/hacktivity?querystring=",
HacktivitySearchUrl: "https://hackerone.com/hacktivity",
PathToLocalDb:       "DB",
FireBaseUrl:         "https://b<redacted>c4.firebaseio.com",
FireBaseToken:       "AI<redacted>c",
BugCrowdProgramsUrl: "URL",

I am confused about SearchUrl and HacktivitySearchUrl parameter, what should these be ?

Second : Which Database I need to use for my local db and what's the PathToLocalDb would be, like if I use Postgres as local db so should I insert the whole connection string ? Is it a text file/sqlite file which the program generates automatically ?

Third : BugCrowdProgramsUrl , for bugcrowd platform don't we have to have logged in cookies, if so then how does your code handle that, cause you don't seem to be asking for logging in to bugcrowd for the same.

Fourth : FirebaseURL and token are what we insert on a web page, which are public, right ?

Thanks a lot.

ta1bbty commented 5 years ago

@CyberLight your inputs would be greatly helpful here, thanks.

CyberLight commented 5 years ago

Hi @ta1bbty!

Sorry for the long time of silence. HackerOne has changed its schema and API, and this bot no longer works. But after detecting this problem, a made the same crawler and bot functions together in node.js. Because in node.js, graphql support is very good. And you can find the current version of the bot here cyxbot repo. This bot gets history from HackerOne using a graphql query with filters and timestamps.